General
- Target x86_64.elf
- Size 102KB
- Sample260806-bhdhcafa59
- SHA256 e2aef39546ce27325e44a7e386a875133484251a8b115074038103ac6235e2e7
- MD5 12d46d381a697241ff6f5937b268b9e2
- SHA1 df933f77857b7fab248075fcbb74c28bb1d08838
- SHA512 d9092d247b9b4fce2b5569523b8d1414bc62f0a59261fe4ac578a6fe5ed3a5a6f212ed3fdc448c21264db4333fa19ba063643c9ab754f8efbce70f09bbcdf77a
- SSDEEP 3072:RwRZog981c2H+ZpIrF3oo6STqB2wqbhR:aPokbCrpoo70ybhR
- TLSH T188A34C02A49180FEC49BD174879FD137EB72F94912307B1F3B907E712E36E626B1A691
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
x86_64.elf
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target x86_64.elf
- Size 102KB
- SHA256 e2aef39546ce27325e44a7e386a875133484251a8b115074038103ac6235e2e7
- MD5 12d46d381a697241ff6f5937b268b9e2
- SHA1 df933f77857b7fab248075fcbb74c28bb1d08838
- SHA512 d9092d247b9b4fce2b5569523b8d1414bc62f0a59261fe4ac578a6fe5ed3a5a6f212ed3fdc448c21264db4333fa19ba063643c9ab754f8efbce70f09bbcdf77a
- SSDEEP 3072:RwRZog981c2H+ZpIrF3oo6STqB2wqbhR:aPokbCrpoo70ybhR
- TLSH T188A34C02A49180FEC49BD174879FD137EB72F94912307B1F3B907E712E36E626B1A691
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1